fix(cctv): FL511 written-consent wording and robust catalog paging

- State FL511's terms the same way everywhere: individual, personal use
  only, and any other use (a public deployment included) needs FDOT's
  express written consent. .env.example, README, dataCredits, the source
  licence string, the catalog comment and the changelog fragment said only
  "individual, non-commercial use".
- Page the ArcGIS catalog on exceededTransferLimit alone and advance the
  offset by the rows each page returned, so a lower server-side max
  record count no longer cuts the catalog short at the first short page.
- Order pages by OBJECTID_1 (this layer's object id; a plain OBJECTID is
  rejected with HTTP 400) so offset paging is stable.
- Raise the page ceiling to 40 and warn when it is hit.
- Tests: short pages with exceededTransferLimit keep paging, orderByFields
  is sent, and a service that ignores resultOffset stops at the ceiling.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/data/cctvFlorida.test.mjs

@@ -9,6 +9,7 @@ import {
 import {
   FLORIDA_CCTV_URL,
   FLORIDA_MAX_CATALOG_BYTES,
+  FLORIDA_MAX_CATALOG_PAGES,
 } from '../../server/providers/cctv/constants.js';
 import {
   fallbackHeadingFromId,
@@ -88,7 +89,8 @@ test('an FL511 feature maps to a source on a pinned HTTPS frame host', () => {
   assert.equal(source.url, `${IMAGE_HOST}chan-9431_h.jpg`);
   assert.equal(source.url, source.snapshotUrl);
   assert.equal(source.sourceKind, 'fl511-open-data');
-  assert.match(source.license, /non-commercial/);
+  assert.match(source.license, /personal use only/);
+  assert.match(source.license, /written consent/);
 });
 
 test('NOT DIRECTIONAL takes the id-hash fallback at low confidence', () => {
@@ -161,7 +163,7 @@ test('isLikelyFloridaCoordinate spans the state and rejects the rest', () => {
     assert.equal(isLikelyFloridaCoordinate(lat, lon), false);
 });
 
-test('the loader pages until a short page and collapses repeated rows', async (t) => {
+test('the loader pages until exceededTransferLimit clears and collapses repeated rows', async (t) => {
   t.mock.method(console, 'log', () => {});
   uncapped(t);
   const calls = [];
@@ -170,7 +172,7 @@ test('the loader pages until a short page and collapses repeated rows', async (t
     calls.push([offsetOf(url), init.redirect]);
     if (offsetOf(url) === 0)
       return Response.json(page(0, 2000, { exceededTransferLimit: true }));
-    // Short last page: two new cameras and a repeat of one already read.
+    // Last page (no exceededTransferLimit): two new cameras and a repeat.
     return Response.json(page(1999, 3));
   });
   const cameras = await loadFloridaSourcesFromOpenData();
@@ -182,6 +184,44 @@ test('the loader pages until a short page and collapses repeated rows', async (t
   assert.equal(new Set(cameras.map((camera) => camera.id)).size, 2002);
 });
 
+test('pages shorter than requested keep paging while the server says more remain', async (t) => {
+  t.mock.method(console, 'log', () => {});
+  uncapped(t);
+  const offsets = [];
+  t.mock.method(globalThis, 'fetch', async (url) => {
+    const params = new URL(String(url)).searchParams;
+    // Offset paging is only stable over a fixed order on the object id.
+    assert.equal(params.get('orderByFields'), 'OBJECTID_1');
+    const offset = offsetOf(url);
+    offsets.push(offset);
+    // A layer whose max record count was lowered to 1,000.
+    return Response.json(
+      page(offset, offset < 2000 ? 1000 : 500, {
+        exceededTransferLimit: offset < 2000,
+      }),
+    );
+  });
+  const cameras = await loadFloridaSourcesFromOpenData();
+  assert.deepEqual(offsets, [0, 1000, 2000]);
+  assert.equal(cameras.length, 2500);
+});
+
+test('a service that ignores resultOffset stops at the page ceiling with a warning', async (t) => {
+  t.mock.method(console, 'log', () => {});
+  const warnings = [];
+  t.mock.method(console, 'warn', (...args) => warnings.push(args.join(' ')));
+  uncapped(t);
+  let calls = 0;
+  t.mock.method(globalThis, 'fetch', async () => {
+    calls += 1;
+    return Response.json(page(0, 2000, { exceededTransferLimit: true }));
+  });
+  const cameras = await loadFloridaSourcesFromOpenData();
+  assert.equal(calls, FLORIDA_MAX_CATALOG_PAGES);
+  assert.equal(cameras.length, 2000);
+  assert.ok(warnings.some((line) => /page ceiling/.test(line)));
+});
+
 test('a redirect on any page drops the whole pack and releases it', async (t) => {
   t.mock.method(console, 'warn', () => {});
   const redirected = streamingResponse({

src/data/dataCredits.js

@@ -267,8 +267,9 @@ export const DATA_CREDITS = [
     key: 'florida-cctv',
     html:
       'Traffic cameras (Florida): FL511, Florida Department of Transportation. ' +
-      'Individual, non-commercial use only under the ' +
-      '<a href="https://fl511.com/privacy#disclaimer" target="_blank" rel="noopener">FL511 terms</a>',
+      'Individual, personal use only under the ' +
+      '<a href="https://fl511.com/privacy#disclaimer" target="_blank" rel="noopener">FL511 terms</a>; ' +
+      "any other use needs FDOT's express written consent",
   },
   {
     key: 'catalonia-cctv',